CVEvulnerability
CVE-2022-26024
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-281
Description
Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel nuc7i3dnbe firmware (< 1.78.2.0.7)
• intel nuc7i3dnhe firmware (< 1.78.2.0.7)
• intel nuc7i3dnhnc firmware (< 1.78.2.0.7)
• intel nuc7i3dnke firmware (< 1.78.2.0.7)
• intel nuc7i3dnktc firmware (< 1.78.2.0.7)
• intel nuc7i5dnbe firmware (< 1.78.2.0.7)
• intel nuc7i5dnhe firmware (< 1.78.2.0.7)
• intel nuc7i5dnke firmware (< 1.78.2.0.7)
• intel nuc7i7dnbe firmware (< 1.78.2.0.7)
• intel nuc7i7dnhe firmware (< 1.78.2.0.7)
• intel nuc7i7dnke firmware (< 1.78.2.0.7)
Related
Weakness · CWE (1)
- CWE-281 Improper Preservation of Permissions weakness